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client calls server to open file 
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server returns file desciptor 
server creates file entry 



— 72 



client calls server to perform an operation on the file 
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server checks security status in file entry 
client allowed to perform the operation 
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client calls server to close the file 
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server checks delete-on-close status in file entry 
server closes file without deleting it from NVRAM 
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FIG. 2 
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client calls server to open file 
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server returns file desciptor 
server creates file entry 
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client passes authorization credential to server — 86 



server passes authorization credential and file 
identity to independent verification routine 
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independent verification routine validates client authorization 
returns positive to server 
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server changes active file security status in file entry 



client calls server to perform an operation on the file 
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server checks security status in file entry ^ 95 

client allowed to perform the operation 



client calls server to close the file 
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server checks delete-on-close status in file entry 
server closes file without deleting it from NVRAM 
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FIG. 3 
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client calls server to open file 1 02 



server returns file desciptor 
server creates file entry 
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client passes authorization credential to server 



server passes authorization credential and file 
identity to independent verification routine 
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independent verification routine validates client authorization 
returns positive to server 
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server changes security status in file entry -—1 1 2 



client calls server to delete the file 
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server checks security status in file entry 
server changes delete-on-close status 
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client calls server to close the file 
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server checks delete-on-close status in file entry 
server closes file without deleting it from NVRAM 
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FIG. 4 
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client calls server to open new file for write ■ — 1 30 



server returns file desciptor 

server creates file entry 
server recognizes file as new 
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client passes authorization credential to server 



— 134 



server passes authorization credential and file 
identity to independent verification routine 
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independent verification routine validates client authorization 
returns positive to server 
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serveir creates file and sets fixed security to secure 
server closes open file entry 
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FIG. 5 



